Security Architect

About the Role

This role supports Our Client as a contract Security Architect Consultant within the our client’s Division of Information Security. The architect will work remotely while collaborating with cross‑functional teams to design, implement, and maintain robust security solutions that protect critical state information. The position demands a strong focus on compliance—particularly CJIS—and the ability to respond to incidents and provide after‑hours support when needed. By shaping security strategy and guiding technical execution, the architect directly contributes to the organization’s overall risk mitigation and resilience.

Key Responsibilities

• Design and document enterprise‑wide security architectures aligned with CJIS and other regulatory frameworks.
• Develop and enforce security policies, standards, and procedures to safeguard information assets.
• Conduct risk assessments, threat modeling, and vulnerability analyses for new and existing systems.
• Lead security reviews and provide guidance to development, operations, and infrastructure teams on secure design practices.
• Implement and configure security controls such as firewalls, intrusion detection/prevention systems, and data encryption solutions.
• Coordinate incident response activities, including escalation, forensic analysis, and post‑incident reporting.
• Perform continuous monitoring using SIEM tools and generate actionable security intelligence.
• Ensure ongoing compliance with CJIS, NIST, and other relevant security standards.
• Provide after‑hours maintenance and support as required to maintain security posture.
• Mentor junior security staff and contribute to knowledge‑sharing initiatives across the organization.

Required Skills & Experience

• Minimum 7‑8 years of experience designing and implementing security architectures in complex, regulated environments.
• Demonstrated expertise in CJIS compliance, including handling of sensitive law‑enforcement data.
• Strong knowledge of security frameworks such as NIST SP 800‑53, ISO 27001, and CIS Controls.
• Proven ability to conduct risk assessments, threat modeling, and vulnerability management.
• Excellent communication skills for translating technical security concepts to non‑technical stakeholders.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree or relevant certifications (CISSP, CISM, CISA, or CJIS certification) preferred.

Tools & Technologies

• Security Information and Event Management (SIEM) platforms (e.g., Splunk, QRadar).
• Firewalls, IDS/IPS, and network segmentation tools.
• Identity and Access Management (IAM) solutions.
• Encryption technologies for data at rest and in transit.
• Vulnerability scanning tools (e.g., Nessus, Qualys).
• Cloud security services (AWS/Azure security controls) where applicable.
• Documentation and diagramming tools such as Visio or Lucidchart.

Work Schedule & Duration

• 12‑month contract with the possibility of extension.
• Fully remote work arrangement; candidates must be able to operate during Eastern Time Zone business hours.
• After‑hours maintenance, incident escalation, and occasional onsite visits may be required; travel costs are the responsibility of the resource.

Interview Process

The interview process consists of a single round, conducted virtually or onsite for local candidates. The session will assess technical expertise, CJIS compliance experience, and cultural fit for the consulting role.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States